Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-77393

Inductive Automation Ignition Incorrect Default Permissions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3 series is not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Inductive Automation Ignition

Default version status: unaffected

  • 0 to ≤ 8.1.53affected
  • 8.1.54unaffected

References